Vulnerability Bulletins |
DSA-4358 ruby-sanitize - security update |
|
| Affected software | Debian |
|
The Shopify Application Security Team discovered that ruby-sanitize, awhitelist-based HTML sanitizer, is prone to a HTML injectionvulnerability. A specially crafted HTML fragment can cause to allow nonwhitelisted attributes to be used on a whitelisted HTML element. More info: https://www.debian.org/security/2018/dsa-4358 |
|